Windows 10: folder creation and sharing, i want to create an admin user that have only permission to...

Hi,I have an issue related to folder creation and sharing, i want to create an admin user that have only permission to modify folders and file but not have domain admin access.He can create delete share files and folders.Please help.

:)

 

How to Customize File Sharing Permissions to Create/Modify/Delete FILES... but not FOLDERS?

Hello. I need to customize a shared folder on my network so that one user (Reba) can create, append, modify, delete all FILES within that folder and subfolders... but Reba should not be able to create or delete the FOLDERS.

I've tested various configurations, and the closest I've been able to come is to create
TWO sets of Advanced permissions for Reba:

1. The first instance of Reba, is ALLOWED, applied to "This folders and subfolders,"

• Traverse folder / execute file
• List folder / read data
• Read attributes
• Read extended attributes
• Create files / write data
• Write attributes
• Write extended attributes
• Delete subfolders and files
• Read permissions

But Reba is DENIED permissions of:

• Full control
• Create folders / append data
• Delete
• Change permissions
• Take ownership

2. The second instance of Reba, is ALLOWED, applied to "Files Only:"

• Traverse folder / execute file
• List folder / read data
• Read attributes
• Read extended attributes
• Create files / write data
• Create folders / append data
• Write attributes
• Write extended attributes
• Delete subfolders and files
• Delete
• Read permissions

But Reba is DENIED permissions of:

• Full control
• Change permissions
  
• Take ownership

The above configuration does deny Reba the ability to create folders/subfolders... but ALLOWs her to delete folders (which I do NOT want her to be able to do).

 

Entire Users folder is shared.

Hi,

Thanks for your reply. The folder was shared and it's likely that a created homegroup initiated that. Un-sharing the folder solved that part.

The reason the standard account had access to the administrators user folder was because I must have granted permanent permission to this folder as an admin and it was something that I overlooked.

 

Entire Users folder is shared.

I've recently created a new administrator account and converted my original admin account into a standard user account for "best practice security"

I noticed that as a standard user I'm able to access the administrators user folder which AFAIK a standard user should not be able to do.

On checking the properties of the "Users" folder and the "Advanced sharing" section of the "Sharing" tab the "Everyone" group has full control over the users folder. The folder is also indicated as being in State:Shared.

I did not initiate these permissions on the users folder so the only thing I can think of is that when I created a Homegroup that the Homegroup initiated the share. I only created the Homegroup for testing purposes and removed it afterwards. I've read a
similar report about Win 7 where in the creation of a Homegroup or public sharing automatically shares the entire users folder and even after removing the Homegroup the users folder remains shared!

Windows 7 File Sharing: Fixing the “Entire User Directory Shared” Problem | Scottie's Tech.Info

Is it possible Windows 10 has inherited the same behavior? At this stage I'm purely speculating about what's happened but the Homegroup issue does seem feasible.

Basically I want to get this all set back to normal or default and I'm concerned that this also a security issue. Not knowing exactly what's happened here I'm unsure about what permissions to go and start changing without breaking anything or making things
worse. Can anyone help me?